$ rpki-client -vvf rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft File: F5SMh3nFnmXK_OLv3LHLUJEThEw.mft (raw, json) Hash identifier: hzd9PPZvADzNQq5ykR/WVfgOhmhrt8+e08mETlwVQ6U= Subject key identifier: A9:EE:BA:F5:EA:BC:56:5E:E6:55:CC:84:4A:96:9B:A1:B4:6D:CF:92 Authority key identifier: 17:94:8C:87:79:C5:9E:65:CA:FC:E2:EF:DC:B1:CB:50:91:13:84:4C Certificate issuer: /CN=A915FC0B/serialNumber=17948C8779C59E65CAFCE2EFDCB1CB509113844C Certificate serial: 0707 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft Manifest number: 0701 Signing time: Fri 30 May 2025 22:09:52 +0000 Manifest this update: Fri 30 May 2025 22:09:51 +0000 Manifest next update: Fri 06 Jun 2025 22:09:51 +0000 Files and hashes: 1: F5SMh3nFnmXK_OLv3LHLUJEThEw.crl (hash: 6hSAk3KWMk43nF1kpipUfwT2muYScXwRASj1ut3TFrE=) 2: 7A75D42E45B211EB99335867C4F9AE02.roa (hash: NsZ4F3z/UkG4nWlQYLX7FdM8TeLtW3jisug+AwHpPsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.crl rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1799 (0x707) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FC0B, serialNumber=17948C8779C59E65CAFCE2EFDCB1CB509113844C Validity Not Before: May 30 22:09:51 2025 GMT Not After : Jun 6 22:09:51 2025 GMT Subject: CN=683a2cb0-645b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:71:ce:ac:9d:2c:ee:1e:80:2e:57:c3:4c:01: 1b:4f:8c:98:f8:6d:72:20:31:a8:dd:a6:4e:98:e2: 2d:ae:67:82:f9:79:ae:81:b7:12:5a:be:42:05:80: a0:f2:a3:d2:82:17:08:45:bb:24:2c:38:b1:22:ce: df:9d:22:21:94:78:84:d9:a1:64:48:14:ca:9e:82: 9f:d1:8d:8c:a5:73:52:6a:de:64:bf:55:49:76:c6: af:b4:9a:5e:1d:1f:a6:e9:ab:89:b7:c2:44:39:27: f7:a3:27:39:a6:a0:01:fd:f8:69:b2:69:d7:00:9b: 1c:58:b4:a0:32:73:8a:41:2d:b2:bd:c1:8f:b7:52: 98:99:d5:3c:af:0c:2d:03:61:ca:26:8e:57:a7:3f: c6:06:e9:48:b0:75:92:9e:cb:cc:0f:c7:90:b6:93: 28:3c:7d:45:44:08:6a:a9:99:b3:7d:36:e7:2d:94: de:f7:19:c1:ae:51:36:40:9a:5e:d0:ee:70:d0:a3: 86:f8:d3:95:0c:8c:bd:3c:f3:77:2c:df:95:02:20: fa:50:3d:93:69:83:ec:cf:31:e7:a3:3d:7f:81:a0: 99:97:37:ae:21:4e:89:f4:d2:ae:47:47:3f:fb:60: a4:7f:23:08:06:68:ff:0b:aa:4d:64:b7:6a:41:5c: c4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:EE:BA:F5:EA:BC:56:5E:E6:55:CC:84:4A:96:9B:A1:B4:6D:CF:92 X509v3 Authority Key Identifier: keyid:17:94:8C:87:79:C5:9E:65:CA:FC:E2:EF:DC:B1:CB:50:91:13:84:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:36:f4:29:dd:db:fe:c5:4b:ac:50:4d:c0:70:cf:42:a8:5e: c8:c8:87:01:2b:e4:21:28:89:45:56:c5:22:95:33:cb:a1:84: 16:a4:12:fd:04:b1:01:80:d9:91:1a:2d:6e:02:ae:70:89:53: 4d:5e:81:4e:f0:3f:39:a4:99:17:bf:bf:3d:dd:b7:dd:40:ef: 9a:0c:37:aa:93:5c:be:4e:9f:18:e3:9b:de:c3:f8:0b:ce:8f: 3e:3d:02:57:3d:c3:d5:3a:2f:2d:b6:2f:76:2a:89:19:c4:17: 05:35:d9:cd:1c:6d:9f:42:e9:d1:e3:72:4c:cb:16:6c:59:18: 7b:be:5a:aa:d6:3c:c4:48:9e:a7:60:05:9d:07:20:73:60:ed: 83:ce:6b:7e:11:e9:35:c0:ef:02:c5:0e:9c:a1:1d:93:2c:92: 9c:88:25:00:4f:38:a1:18:53:b3:21:ab:d0:db:e0:ee:85:af: a7:cd:93:7e:b9:ea:66:52:a8:bc:1a:c9:95:54:f9:34:8b:da: af:dd:74:9d:41:bc:c9:f5:f7:d1:3b:b1:50:dc:37:9e:c6:63: 7e:a1:0c:44:9a:8a:aa:49:ba:f1:ec:cf:e8:d6:45:17:92:8b: bb:94:bc:22:70:78:1a:35:a5:f5:3e:27:a2:7b:0b:ff:a8:b9: e6:9c:3f:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZDMEIxMTAvBgNVBAUTKDE3OTQ4Qzg3NzlDNTlFNjVDQUZDRTJFRkRDQjFDQjUw OTExMzg0NEMwHhcNMjUwNTMwMjIwOTUxWhcNMjUwNjA2MjIwOTUxWjAYMRYwFAYD VQQDEw02ODNhMmNiMC02NDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnHOrJ0s7h6ALlfDTAEbT4yY+G1yIDGo3aZOmOItrmeC+XmugbcSWr5CBYCg 8qPSghcIRbskLDixIs7fnSIhlHiE2aFkSBTKnoKf0Y2MpXNSat5kv1VJdsavtJpe HR+m6auJt8JEOSf3oyc5pqAB/fhpsmnXAJscWLSgMnOKQS2yvcGPt1KYmdU8rwwt A2HKJo5Xpz/GBulIsHWSnsvMD8eQtpMoPH1FRAhqqZmzfTbnLZTe9xnBrlE2QJpe 0O5w0KOG+NOVDIy9PPN3LN+VAiD6UD2TaYPszzHnoz1/gaCZlzeuIU6J9NKuR0c/ +2CkfyMIBmj/C6pNZLdqQVzESwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKnuuvXq vFZe5lXMhEqWm6G0bc+SMB8GA1UdIwQYMBaAFBeUjId5xZ5lyvzi79yxy1CRE4RM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkMwQi9CRUU3NTU4MDQ1 QjAxMUVCQTM2OTZENjNDNEY5QUUwMi9GNVNNaDNuRm5tWEtfT0x2M0xITFVKRVRo RXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y1U01oM25Gbm1YS19PTHYzTEhMVUpFVGhFdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkMwQi9CRUU3NTU4MDQ1QjAxMUVCQTM2OTZENjNDNEY5QUUwMi9GNVNNaDNuRm5t WEtfT0x2M0xITFVKRVRoRXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkNvQp3dv+xUusUE3AcM9CqF7IyIcBK+QhKIlFVsUilTPLoYQWpBL9 BLEBgNmRGi1uAq5wiVNNXoFO8D85pJkXv7893bfdQO+aDDeqk1y+Tp8Y45vew/gL zo8+PQJXPcPVOi8tti92KokZxBcFNdnNHG2fQunR43JMyxZsWRh7vlqq1jzESJ6n YAWdByBzYO2Dzmt+Eek1wO8CxQ6coR2TLJKciCUATzihGFOzIavQ2+Duha+nzZN+ uepmUqi8GsmVVPk0i9qv3XSdQbzJ9ffRO7FQ3DeexmN+oQxEmoqqSbrx7M/o1kUX kou7lLwicHgaNaX1Pieiewv/qLnmnD/7 -----END CERTIFICATE-----Generated at Sat May 31 16:33:05 2025 by rpki-client